lnappuserchooser.i

<?php
/*
 * Test to find out how the user will be authenticating:
 * 1. Already in lnappuser table = use userlogintype.
 * 2. Not in lnappuser table = check homebanking table.
 * 3. None of the above then use the MIR packet, if configured.
 * 4. All else fails = return to login screen.
 *
*/
  $loadScript = "lnappintro.i";      // default to intro screen
  /*
   * hbssouser - This code is used WHEN initially logging in from home banking.
   *              the member must have a valid session
   */
  if (isset($_POST['applogin']) || ($hbuser_cookie_user && $DMSAPP_CURRENTUSERID > 0) || $form_code == 'hbssouser') {
    // * we are posting from the intro screen
    $loginUser = save_text( trim( $_POST['hbusername'] ), 12 );
    // Not needed - it will end up being directed below to hcuLogin page.
    // if ( preg_match("/\D/", $loginUser) ) {
    //   //this is an alias and only can be home banking
    //   $loadScript = "lnapphbuser.i";
    // } else
    if ($loginUser != '') {
      // test if already in lnappuser table
      $sql = "SELECT *
              FROM {$DB_TABLE_PREFIX}user
              WHERE cu = '$DMSAPP_CURRENTCUCODE'
              AND session_account = '$loginUser' ";
      $user_rs = db_query($sql, $dbh);

      $data['cu'] = $DMSAPP_CURRENTCUCODE;
      $data['username'] = $loginUser;
      $data['btnLogin'] = '1';
      $payload = http_build_query($data, '', '&');
      $cuServer = $_SERVER['SERVER_NAME'];
      if($cuServer == 'localhost'){
        $url = "http://${cuServer}:8000/banking/hcuLogin.prg?" . $payload;
      } else {
        $url = "http://my.homecu.net/banking/hcuLogin.prg?" . $payload;
      }

      if ($user_row = db_fetch_assoc($user_rs)) {
        // figure out what kind of user
        if ( $user_row["userlogintype"] == DMSAPP_CONST_HB_LOGIN ) {
          // $loadScript = "lnapphbuser.i";
          // Force to login screen
          header("Location: {$url}");
          exit;
        } else if ( $user_row["userlogintype"] == DMSAPP_CONST_MIR_LOGIN ) {
          $loadScript = "lnappmiruser.i";
        }
      } else {

        // wasn't in the lnappuser table, so check the home banking table
        $sql = "SELECT user_id, group_id, user_name, email, failedremain,     passwd, confidence
        FROM {$DMSAPP_CURRENTCUCODE}user
        WHERE user_name = '{$loginUser}'; ";

        $hb_rs = db_query($sql, $dbh);
        if ($hb_row = db_fetch_assoc($hb_rs)) {
          // Force to login screen
          header("Location: {$url}");
          exit;

        } else {
          // see if configured to allow MIR packet

          if ( $DMSAPP_FETCHMIR ) {
            $loadScript = "lnappmiruser.i";
          } else {
            // let the old error system handle it
            $loadScript = "lnapphbuser.i";
          }
        }
      }
    } else if ( $hbuser_cookie_user || $form_code == 'hbssouser' ) {
      $loadScript = "lnapphbuser.i";
    } else if ( $miruser_cookie_user ) {
      $loadScript = "lnappmiruser.i";
    }
  }

  require_once( $loadScript );